New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

The Microsoft Security blog outlines the New Microsoft Secure Future Initiative (SFI) patterns and practices, the second instalment building on the initial launch to make security guidance practical and scalable for practitioners. It presents six patterns designed to address common risks, from network design to software development and monitoring.

The pattern set covers Network isolation to contain breaches, Secure all tenants and resources to eliminate shadow environments, Higher security for Entra ID apps to block cross-tenant misconfigurations, Zero Trust for source code access to protect the dev pipeline, Protect the software supply chain to govern CI/CD and dependencies, and Centralise access to security logs to speed investigations across multi-cloud environments.

Each pattern follows a reusable structure with a problem, solution, guidance and implications, drawn from Microsoft’s own experiences. The piece notes an April 2025 progress report and invites organisations to access the full SFI patterns and practices library and related video content to understand how to implement security by design and by default. According to Microsoft, the goal is to help customers apply these approaches across their environments.